Known vulnerabilities in OpenShift Service Mesh - page 2

Software CPE: cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 17
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenShift Service Mesh OpenShift Service Mesh is affected by 273 known vulnerabilities: 47 high, 157 medium, 69 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101027 - Error Handling
CVE-2024-21536
CWE-388 Medium
No
No
2.6.3 28.11.2024 SB2024112825
SB2024112826
SB2024120211
and 22 more
#VU100997 - Insecure Storage of Sensitive Information
CVE-2024-10041
CWE-922 Low
No
No
2.4.13, 2.5.7, 2.6.5 27.11.2024 SB2024112540
SB2024112747
SB2024112748
and 38 more
#VU100912 - Improper Authentication
CVE-2024-10963
CWE-287 Medium
No
No
2.4.13, 2.5.7, 2.6.5 25.11.2024 SB2024112540
SB2024112541
SB2024112542
and 56 more
#VU99614 - Improper input validation
CVE-2024-50602
CWE-20 Medium
No
No
2.4.13, 2.5.7 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875
CWE-79 Medium
No
No
2.5.6 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
2.6.2 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98022 - Use of Uninitialized Variable
CVE-2024-9355
CWE-457 Medium
No
No
2.5.6 03.10.2024 SB2024100348
SB2024100349
SB2024101608
and 24 more
#VU97626 - Improper Output Neutralization for Logs
CVE-2024-45808
CWE-117 Medium
No
No
2.6.2 20.09.2024 SB2024092014
SB2024092023
SB2024100826
#VU97625 - Improper input validation
CVE-2024-45806
CWE-20 Medium
No
No
2.5.5, 2.6.2 20.09.2024 SB2024092014
SB2024092023
SB2024100825
and 1 more
#VU97623 - Resource Management Errors
CVE-2024-45810
CWE-399 Medium
No
No
2.6.2 20.09.2024 SB2024092014
SB2024092023
SB2024100826
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796
CWE-79 Medium
No
No
2.6.2 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590
CWE-405 Medium
Available
No
2.5.5, 2.6.2 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU95131 - Out-of-bounds read
CVE-2024-7264
CWE-125 Medium
No
No
2.6.2 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596
CWE-327 Medium
Available
No
2.5.6 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
2.5.6 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU91157 - Use of Weak Credentials
CVE-2024-23326
CWE-1391 Medium
No
No
2.5.5 05.06.2024 SB2024060518
SB2024060519
SB2024070220
and 1 more
#VU88181 - Resource exhaustion
CVE-2024-30255
CWE-400 Medium
No
No
2.5.5 05.04.2024 SB2024040530
SB2024100412
SB2024100825
and 2 more
#VU87808 - Insufficient Verification of Data Authenticity
CVE-2024-30203
CWE-345 High
No
No
2.5.5, 2.6.2 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 30 more
#VU87804 - Insufficient Verification of Data Authenticity
CVE-2024-30205
CWE-345 High
No
No
2.5.5, 2.6.2 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 32 more
#VU19178 - Out-of-bounds write
CVE-2019-12900
CWE-787 High
No
No
2.4.13, 2.4.14, 2.5.6, 2.5.7, 2.5.8, 2.6.5 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more


Showing elements 21 - 40 out of 273